The Neiman Marcus Group LLC
ent_019e2207df25768caed38e93ed5e6afc
Disclosures
19
State AG · 12 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
4,354,346
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Neiman Marcus Group LLC
- Normalized
- the neiman marcus— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 3LGBWM7SJ10PEV1KRW42
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (19)newest first
- Vermont State AGas victim2024-06-24
The Neiman Marcus Group notified consumers that an unauthorized third party accessed a database platform between April and May 2024. Affected data included names, contact info, DOB, and gift card numbers. Neiman Marcus disabled access, engaged cybersecurity experts, and notified law enforcement. No specific count of affected individuals was provided in the filing.
- Maine State AGas victim2024-06-24
The Neiman Marcus Group LLC reported an external system breach (hacking) occurring between April 14 and May 24, 2024. The incident affected 64,472 individuals nationwide, including 184 Maine residents. Compromised data included names, contact info, dates of birth, and gift card numbers. Notices were sent on June 24, 2024.
- South Carolina State AGas victim2024-06-24
The Neiman Marcus Group, LLC notified South Carolina residents that an unauthorized third party accessed a database platform between April and May 2024. The incident exposed names, contact info, DOB, and gift card numbers. The company disabled access, engaged cybersecurity experts, and notified law enforcement.
- Massachusetts State AGas victim2024-06-24
The Neiman Marcus Group LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-24. 4,046 Massachusetts residents were affected.
- Washington State AGas victim2024-06-24
The Neiman Marcus Group LLC reported a data breach in Washington affecting 11,049 residents. Unauthorized access occurred between April and May 2024 to a third-party Snowflake cloud database. Stolen data included names, contact info, and DOBs. The company contained the breach, engaged forensic experts, and notified law enforcement.
- New Hampshire State AGas victim2021-10-04
Neiman Marcus Group, LLC notified the NH Attorney General on Sept 30, 2021, of a breach occurring in May 2020. Unauthorized access affected 11,557 NH residents, exposing names, contact info, payment card numbers, and credentials. Mandiant was engaged and law enforcement notified.
- Maine State AGas victim2021-10-01
The Neiman Marcus Group, LLC reported an external system breach (hacking) occurring between May 2 and May 17, 2020, discovered on September 9, 2021. The incident affected 4,354,346 individuals in the U.S., including 5,951 Maine residents. Acquired data included names and financial account or credit/debit card numbers with security codes. Substitute notice was sent on September 30, 2021.
- Indiana State AGas victim2021-09-30
The Neiman Marcus Group reported a data breach to the Indiana Attorney General. The breach occurred on 2020-05-02 and was reported on 2021-09-30. 31,992 Indiana residents were affected. 4,354,346 individuals affected in total.
- Massachusetts State AGas victim2021-09-30
The Neiman Marcus Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-09-30. 112,471 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2021-09-30
The Neiman Marcus Group, LLC notified customers that an unauthorized party obtained personal information associated with certain online accounts in May 2020. The incident was discovered in September 2021. Affected data may include names, contact info, payment card numbers (without CVV), virtual gift card numbers, usernames, passwords, and security questions/answers. The company engaged cybersecurity experts, notified law enforcement, and required password resets for affected accounts. The investigation is ongoing.
- Delaware State AGas victim2021-09-30
The Neiman Marcus Group notified customers of a data breach involving unauthorized access to online account information in May 2020. Affected data included names, contact info, payment card numbers (no CVV), virtual gift card numbers, and usernames/passwords/security questions. The company engaged cybersecurity experts and law enforcement, and required password resets for affected accounts. The investigation was ongoing as of the September 30, 2021 notification.
- Oregon State AGas victim2021-09-30
The Neiman Marcus Group, LLC (“NMG” or the “Company”) reported a data breach to the Oregon Attorney General. The breach was reported on 2021-09-30. The breach occurred during 1/1/0001 - 5/17/2020. The breach was discovered on 9/9/2021. 4,354,346 individuals were affected. Notice was sent on 9/30/2021.
- Washington State AGas victim2021-09-30
The Neiman Marcus Group, LLC reported unauthorized access to customer online accounts in May 2020. The incident affected 67,410 Washington residents. Compromised data included names, contact info, payment card numbers, gift card numbers, and usernames/passwords. NMG engaged Mandiant and notified law enforcement.
- Illinois State AGas victim2021-01-01
THE NIEMAN MARCUS GROUP filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-395). The register records the breach as discovered on May 1, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- California State AGas victim2017-07-26
In January 2016, The Neiman Marcus Group detected unauthorized access to its mobile app environment via automated brute-force attacks using credentials stolen from other breaches. Attackers accessed customer names, addresses, phone numbers, last four digits of credit cards, expiration dates, and gift card account numbers. Full credit card numbers were not accessed. The company updated app security controls and required password resets for affected accounts.
- Montana State AGas victim2017-04-17
Account takeover noticeCustomers notified of unauthorized access to their accounts.
- California State AGas victim2017-04-14
The Neiman Marcus Group reported a data security breach to the California Attorney General. The incident occurred on December 26, 2015. The breach involved PCI (payment card industry) and PII (personally identifiable information) data, including identity basic information and financial account details. The specific attack vector, number of affected individuals, and discovery date are not disclosed in the provided summary or attachment text.
- Massachusetts State AGas victim2017-04-14
The Neiman Marcus Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-04-14. 184 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas reporting2017-04-14
Account takeover noticeCustomers notified of unauthorized access to their accounts.